A ransom by definition: a sum of money demanded or paid for the release of a captive. Thanks to this, we can somehow say what ransomware is: a class of malware that restricts access to the computer system it infects and demands payment of a ransom from the creator of the malware for the restriction to be removed. deleted. Claiming to be one of the most destructive and profitable malware to date for authors, it is reported: “Over the past few weeks, we have seen over 500 incidents per day of this malware. Incidents are being reported across India. " says Mr. Katkar, CTO of India's leading antivirus software Quick Heal, dated early September. First appeared in Russia in 2005, called Winlock, which managed to defraud unsuspecting victims of more than £10 million before Russian authorities arrested 10 people for their involvement in such hacks in 2010 , but this did not prevent the problem from multiplying. With so much profitable money to be had, perpetrators have discovered new ways to spread malware and cash in at the victims' expense. Kroll Ontrack, a data recovery services consulting firm based in Midtown Manhattan, New York, said it has recently received an increase in the number of recovery requests from businesses across Europe following an infection. by various forms of ransomware. Additionally, the majority of these requests still come from Spain, but there is now a notable trend of frequent reports of new outbreaks elsewhere in other parts of the world. In just a few years, ransomware has evolved from a threat targeting Russia. users, to an attack which now affects several other countries outside Europe. With such a promising and profitable business environment...... middle of paper ...... y up to $300 (according to the latest reported record) to purchase the unique key to decrypt the files along with a time limit display in which the payment must be made, otherwise the unique encryption key may become invalid, making the files impossible to recover. However, the strange thing about this scam is that victims cannot use their own credit or debit cards to make payments. payments – instead, they must purchase an anonymous debit card service (e.g. MoneyPak, Bitcoin) that supports the anonymous identity of the perpetrators. Unfortunately, most victims often complete the financial transaction, but in the end, their machines remain locked, while the criminals make off with the money. Additionally, due to the extremely large size of keys used by ransomware, affected machines are considered extremely difficult to repair..